LPR_CX_Escape
LPR_CX_Exchange
LPR_CX_Setup
LPR_CX_ShutDown
Static task
static1
Behavioral task
behavioral1
Sample
745aca3116e7d456470b4d23b84db1f1_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
745aca3116e7d456470b4d23b84db1f1_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
745aca3116e7d456470b4d23b84db1f1_JaffaCakes118
Size
53KB
MD5
745aca3116e7d456470b4d23b84db1f1
SHA1
388273f8a3160de791c9b163d2a7b16b4eff04c5
SHA256
45e1cdcb94ad103b2e33a2ed71a3810a24ff369b1cc574dfa84c6c5f0742449b
SHA512
ee937622742ff50727f0f48dfb7bb6a897c2767d3c71954ba64ddb5307716955d5ac5118c03d2e9c7972536c4d91a1f3ba1f093aa8b040c33a9b58acf63e1fb7
SSDEEP
1536:nKj2qhP0Rv3L6ttlvDZeixkihJYdzZcCWDCy3pjl5en:KCqFA+zFDcixkiEdz+CYCy3pjDen
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
745aca3116e7d456470b4d23b84db1f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LPR_CX_Escape
LPR_CX_Exchange
LPR_CX_Setup
LPR_CX_ShutDown
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE